unilabs.dk

.dk crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 389 ms crawled 2026-05-20

US · 104.18.30.200 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Forside | Unilabs

Language

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://unilabs.dk/

Translations

en ×3
es ×2
fr ×2
da
de
fi
it
nb
sv

Technology

CDN: Cloudflare
CMS: Drupal
PHP: 8.1.34 end of life

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Third-party hosts loaded (14)

unilabs.ch×3
unilabs.com×2
cdn.cookielaw.org×1
fonts.googleapis.com×1
static.addtoany.com×1
unilabs.ae×1
unilabs.co.uk×1
unilabs.fi×1
unilabs.fr×1
unilabs.no×1
unilabs.pe×1
unilabs.se×1
www.googletagmanager.com×1
www.unilabs.es×1

DNS records live

NS

dean.ns.cloudflare.com
phoenix.ns.cloudflare.com

MX

10 mail.unilabs.dk

TXT

_8vhcql2yb5pob9rgj08jwbzjsqvv4nx

Email authentication weak

SPF: v=spf1 a mx ip4:80.92.66.174 ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-18 to 2026-08-16

Expires in 88 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://unilabs.dk/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection

Header values

referrer-policy: unsafe-url
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: autoplay=(), geolocation=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self' 'unsafe-inline' data: gap: https://ssl.gstatic.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; script-src-elem * https://fonts.googleapis.com httpfs://static.addtoany.com/https://cdn.cookielaw.org https://www.googletagmanager.com/ https://www.google-analytics.com/ https://www.googleadservices.com https://static.hotjar.com https://script.hotjar.com/ https://www.google-analytics.com https://googleads.g.doubleclick.net 'unsafe-inline'; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com https://widget.moin.ai https://css.zohocdn.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://jquery.app https://www.jqueryscript.net https://stackpath.bootstrapcdn.com; img-src * 'self' 'unsafe-inline' data:; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://widget.moin.ai https://se-content-b.psplugin.com https://content.psplugin.com htt